CVE-2026-7329
An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.
CVSS
9.9
Crítico
EPSS
0.4%
p31
KEV
—
Exploit Today
9
0-100
Publicado: 5 ago 2026 · Última mod.: 3 sept 2026 · CWE-269
0.3%EPSS · 30 días0.4%
2026-08-222026-09-19
An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of privileged operations and unauthorized data access.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-868148.1 ALT3.4%
——1The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, allowing unauthenticated attackers to log in as any user, including administrators, whose email address they can assert through a provider account of their own.14hCVE-2026-765547.2 ALT3.2%
——1The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to create or modify user accounts and assign roles, allowing users granted a delegated WP Import Export Lite WordPress plugin before 3.9.35 permission, who cannot otherwise manage users, to create administrator accounts and to overwrite the credentials and role of existing accounts, including administrators.14hCVE-2026-840897.8 ALT1.3%
——0IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.14hCVE-2026-840837.8 ALT1.7%
——1IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands as root, resulting in full compromise of the Collector appliance.13hCVE-2026-828937.8 ALT1.3%
——0IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.13hCVE-2026-617819.9 CRÍ46.1%
——14pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, create_partition_time() reads the writable part_config.time_encoder text value and interpolates it without identifier quoting into a dynamically executed SELECT statement. A role with the documented partman_user INSERT and UPDATE privileges can store SQL rather than a function name. When pg_partman_bgw later creates a child partition for a text- or UUID-keyed set, the worker executes the stored SQL with pg_partman_bgw.role privileges, which default to PostgreSQL superuser. The persistent configuration row can repeatedly restore elevated access on later maintenance ticks, and successful exploitation can permit database-wide compromise and operating-system command execution as the PostgreSQL service account. This issue is fixed in version 5.5.0.1d